OpenBSD fixes 27‑year‑old PPP PAP auth bypass
A one‑line bug in OpenBSD’s PPP PAP authentication, introduced in July 1999, let an attacker send zero‑length credentials and bypass login, granting remote kernel access. The flaw also allowed a heap over‑read. OpenBSD patched it now, ending a 27‑year exposure.